608 matches found
EUVD-2011-4828
Malware in sbrugna...
EUVD-2019-0233
Malware in sbrugna...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-382076)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-382076 advisory. In the Linux kernel, the following vulnerability has been resolved: ftrace: Avoid potential division by zero in functionstatshow Check whether denominator expression...
EUVD-2025-15353
Malicious code in bioql PyPI...
EUVD-2025-9423
Malicious code in bioql PyPI...
parsec security subsystem Heap Buffer Overflow DoS
The vulnerability of the parsecstattodo function in the PARSEC security subsystem relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
parsec_stat function PARSEC security subsystem DoS
The vulnerability of the parsecstat function in the PARSEC security subsystem relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2025-10034
A vulnerability was found in D-Link DIR-825 1.08.01. This impacts the function getping6appstat of the file ping6response.cg of the component httpd. Performing manipulation of the argument ping6ipaddr results in buffer overflow. It is possible to initiate the attack remotely. The exploit has been...
CVE-2025-10034
D-Link DIR-825 1.08.01 is affected in the httpd component (ping6_response.cg) via get_ping6_app_stat; manipulating the ping6_ipaddr parameter triggers a buffer overflow. The flaw enables remote exploitation and is documented as already public. The vulnerability affects products no longer supporte...
CVE-2025-10034 D-Link DIR-825 httpd ping6_response.cg get_ping6_app_stat buffer overflow
A vulnerability was found in D-Link DIR-825 1.08.01. This impacts the function getping6appstat of the file ping6response.cg of the component httpd. Performing manipulation of the argument ping6ipaddr results in buffer overflow. It is possible to initiate the attack remotely. The exploit has been...
fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats
...
D-Link DIR-825 Router Maintenance Failure
The vulnerability of the getpingappstat function in D-Link DIR-825 router microprogramming software is related to the execution of operations outside the buffer in memory when processing the pingipaddr parameter. Exploiting this vulnerability allows a remote attacker to cause a service failure...
CVE-2025-9734 O2OA Personal Profile stat cross site scripting
A security flaw has been discovered in O2OA up to 10.0-410. The impacted element is an unknown function of the file /xqueryassembledesigner/jaxrs/stat of the component Personal Profile Page. The manipulation of the argument name/alias/description/applicationName results in cross site scripting. T...
CVE-2025-9734
O2OA up to version 10.0-410 contains a cross-site scripting vulnerability in the Personal Profile Page component, triggered by manipulating the name/alias/description/applicationName arguments in the file path /x_query_assemble_designer/jaxrs/stat. The issue is exploitable remotely and, per sourc...
CVE-2025-9734
A security flaw has been discovered in O2OA up to 10.0-410. The impacted element is an unknown function of the file /xqueryassembledesigner/jaxrs/stat of the component Personal Profile Page. The manipulation of the argument name/alias/description/applicationName results in cross site scripting. T...
CVE-2025-9734 O2OA Personal Profile stat cross site scripting
A security flaw has been discovered in O2OA up to 10.0-410. The impacted element is an unknown function of the file /xqueryassembledesigner/jaxrs/stat of the component Personal Profile Page. The manipulation of the argument name/alias/description/applicationName results in cross site scripting. T...
O2OA 安全漏洞
O2OA is an enterprise application development platform from O2OA Open Source. A security vulnerability exists in O2OA 10.0-410 and earlier versions, which stems from cross-site scripting due to incorrect manipulation of the parameter name/alias/description/applicationName in the file...
CVE-2025-9734: Improper Neutralization of Input During Web Page Generation
A security flaw has been discovered in O2OA up to 10.0-410. The impacted element is an unknown function of the file /xqueryassembledesigner/jaxrs/stat of the component Personal Profile Page. The manipulation of the argument name/alias/description/applicationName results in cross site scripting. T...
PT-2025-36373
Name of the Vulnerable Software and Affected Versions: D-Link DIR-825 version 1.08.01 Description: A buffer overflow issue exists in the httpd component of D-Link DIR-825. The get ping6 app stat function within the ping6 response.cg file is affected. Manipulation of the ping6 ipaddr argument can...
Linux Distros Unpatched Vulnerability : CVE-2011-4917
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel through 3.1 there is an information disclosure issue via /proc/stat. CVE-2011-4917 Note that Nessus relies on the presence of the package as...